Aggregator

A vulnerability has been found in Swim Team Plugin 1.44.10777 on WordPress and classified as critical. Affected by this vulnerability is an unknown functionality of the file include/user/download.php. The manipulation of the argument file leads to path traversal (Absolute). This vulnerability is known as CVE-2015-5471. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in PHPGurukul News Portal 4.1. This issue affects some unknown processing of the file /login.php. The manipulation of the argument id leads to sql injection. The identification of this vulnerability is CVE-2025-1859. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in Codezips Online Shopping Website 1.0. This vulnerability affects unknown code of the file /success.php. The manipulation of the argument id leads to sql injection. This vulnerability was named CVE-2025-1858. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This affects an unknown part of the file /check_availability.php. The manipulation of the argument employeeid leads to sql injection. This vulnerability is uniquely identified as CVE-2025-1857. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Submit #506350 / VDB-298127

Submit #506315 / VDB-298126

A vulnerability was found in Codezips Gym Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/gen_invoice.php. The manipulation of the argument id leads to sql injection. This vulnerability is handled as CVE-2025-1856. The attack may be launched remotely. Furthermore, there is an exploit available.

Submit #506120 / VDB-298125

A vulnerability was found in PHPGurukul Online Shopping Portal 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /product-details.php. The manipulation of the argument quality/price/value/name/summary/review leads to sql injection. This vulnerability is known as CVE-2025-1855. The attack can be launched remotely. Furthermore, there is an exploit available.

Submit #506107 / VDB-298124

A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/del_member.php. The manipulation of the argument name leads to sql injection. This vulnerability is traded as CVE-2025-1854. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

Submit #506101 / VDB-224831

Submit #506100 / VDB-214697

Submit #506084 / VDB-298123

Submit #506076 / VDB-298123

Submit #506082 / VDB-298123

Submit #506075 / VDB-298123

Submit #506074 / VDB-298123

Submit #506066 / VDB-298123